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IN THE SPECIFICATION 

Please insert the following paragraphs immediately 
prior to the paragraph entitled "Best Mode for Carrying Out 
the Invention" on page 9 as follows: 

FIG. 9 shows a flow of operations made in 
controlling data recording in accordance with aspects of the 
invention. 

FIG. 10 shows a flow of operations made in data 
transmission and receiving in accordance with aspects of the 
invention . 

Please replace the paragraph beginning on page 22, 
line 20 and ending on page 23, line 5 with the following: 

In step S33, the system controller 33 authenticates 
the input unit 40 connected to the I/F 31. When the input unit 
40 has successfully been authenticated, the system controller 
33 goes to step S35. On the other hand, if the input unit 40 
has not successfully been authenticated in step S33, the 
system controller 33 goes to step S3 6 where it will exit the 
content data record mode, and then goes to step S37 wherein it 
will exit the procedure with displaying, on the display unit 
30, a message that the input unit 40 has not successfully been 
authenticated . 

Please insert the following paragraphs immediately 
following the paragraph beginning on page 39, line 18 and 
ending on page 39, line 21 as follows: 

FIG. 9 illustrates a process for controlling data 
recording. The process starts at step S200, and at step S202 
it is determined whether a request is received. If so, at 
step S204 data stored in a storage unit provided by a server 
is sent to a recorder. The data has at least buried therein 
user identification information intended to identify a user 
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and has been encrypted with the user identification 
information. Next, at step S2 06, the recorder is caused to 
extract the user identification information from the received 
data. Next, at step S208, it is judged whether the extracted 
user identification information is coincident with user 
identification information held in an information holder 
provided in the recorder. If so, then at step S210 the 
received data is recorded to a recording medium. The process 
then ends at step S212. 

However, if it is judged that the user 
identification information extracted from the received data is 
not coincident with the user identification information held 
in the information holder in the player, it is judged at step 
S214 whether user identification information in the received 
data is to be rewritten. If it is judged that the user 
identification information in the received data is not to be 
rewritten, the process proceeds to step S210 where the 
received data is recorded to the recording medium. 

When it is judged that the user identification 
information in the received data is to be rewritten, the 
server may judge whether the user identification information 
can be rewritten at step S216. If so, the recorder may then 
acquire the user identification information from the server in 
step S218. The server may judge whether the user 

identification information can be rewritten based on solvency 
of a grantee of the received data sent from the recorder. 

Following step S218, the recorder decrypts the 
received data in step S220. It re-encrypts the decrypted data 
with new user identification information and records it to the 
recording medium in step S222 . The new user identification 
information may be sent from the recorder to the server in 
step S224. The process then ends at step S212. 
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When it is judged that the user identification 
information cannot be rewritten, the recorder records the 
received data to the recording medium in step S210. 

FIG. 10 illustrates a data transmitting/receiving 
process, which starts at step S300. At step S302, a 

recorder/player outputs data read from a recording medium 
having recorded therein data having user identification 
information intended to identify a user and which has been 
encrypted with the user identification information. At step 
S304 it is judged whether the user identification information 
supplied from a terminal unit with a memory having user 
identification information recorded therein is coincident with 
the user identification information read from the recording 
medium. 

When it is judged that the user identification 
information supplied from the terminal unit is coincident with 
the user identification information read from the recording 
medium, the recorder /player is caused to send to a server the 
user identification information showing the coincidence at 
step S306. At step S308 the server sends to the 

recorder/player a reference number based on the received user 
identification information. Then at step S310 the 

recorder/player buries the received reference number into the 
data read from the recording medium, sends the data to the 
server and stores the data into a storage unit provided in the 
server . 

Upon request, at step S3 12 data stored in the 
storage unit provided in the server is sent to the 
recorder /player . At step S3 14, the recorder /player extracts 
the user identification information from the received data. 

At step S316 it is judged whether the extracted user 
identification information is coincident with the user 
identification information stored in the memory in the 
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terminal unit. If so, at step S318 the recorder /player is 
caused to record the received data to the recording medium. 
The process ends at step S320. 

When it is judged that the extracted user 
identification information read from the recording medium is 
not coincident with the user identification information stored 
in the memory of the terminal unit, it is judged at step S322 
whether user identification information in the received data 
is to be rewritten. 

When it is judged that the user identification 
information in the received data is not to be rewritten or 
cannot be rewritten, the recorder /player records the received 
data to the recording medium as in step S318. 

When it is judged that the user identification 
information in the received data is to be rewritten, at step 
S324 the server may judge whether the user identification 
information can be rewritten. In this case, the server may 
judge whether the user identification information can be 
rewritten based on solvency of a grantee of the data sent from 
the recorder/player. When the user identification information 
can be rewritten, the recorder/player acquires user 
identification information from the data sent from the server 
at step S326. Then at step S328 the recorder/player decrypts 
received data. At step S33 0 the recorder /player re-encrypts 
the decrypted data received from the server with new user 
identification information and records the data to the 
recording medium. Then the process ends at step S320. 
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